Avatar of hmcnasty
hmcnasty
 asked on

Reconfigure Microsoft Exchange Server to Use a Fully Qualified Domain Name

Hi.
I have 2 clients running exchange server 2010.  
I needed to upgrade their exchange ssl certificates.  I was told when I was renewing them that certs can no longer contain the local name of the exchange server.  
So I renewed the certificates with only the outside domain name mail.yourcompany.com
I ran these commands in the exchange shell:

To change the Autodiscover URL, type the following command, and then press Enter:
    Set-ClientAccessServer -Identity main-fs -AutodiscoverServiceInternalUri https://mail.mycompany.com/autodiscover/autodiscover.xml

    To change the InternalUrl attribute of the EWS, type the following command, and then press Enter:
    Set-WebServicesVirtualDirectory -Identity "main-fs\EWS (Default Web Site)" -InternalUrl https://mail.mycompany.com/ews/exchange.asmx

    To change the InternalUrl attribute for Web-based Offline Address Book distribution, type the following command, and then press Enter:
    Set-OABVirtualDirectory -Identity "main-fs\oab (Default Web Site)" -InternalUrl https://mail.mycompany.com/oab
   
    To recycle the application pools, open IIS Manager.
    Expand the local computer, and then expand Application Pools.
    Right-click MSExchangeAutodiscoverAppPool, and then click Recycle.

Today the users are complaining about a cert popup in their local outlook clients.  

What do I need to do to fix this?

Wes
Email ServersExchange

Avatar of undefined
Last Comment
hmcnasty

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
Will Szymkowski

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
hmcnasty

ASKER
Thanks Will.  
When I put in the new zone name is it mail.mycompany.com or just mycompany.com?

Odd that godadddy did say I needed to do any of this for it to work.  Although not surprising I guess
Will Szymkowski

You would create a new zone on your interal DNS for mycompany.com. Then you would create a Host (A) record for mail.mycompany.com and a cname for autodiscover.domain.com.

Will.
hmcnasty

ASKER
never mind on that last question. I'll keep you posted
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.
rwheeler23
hmcnasty

ASKER
Ok done.  Do I need to adjust the clients at all?
hmcnasty

ASKER
Thanks Will.  This seems to work when I recreate the profiles manually using mail.mycompany.com However on the current clients the es reads exchangeserver.local
Will Szymkowski

on client that are not working have you tried to run Test Email Auto Config to see if you are getting the correct URL's from Autodiscover?

This should not be required to re-create all of the profiles.

Will.
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
hmcnasty

ASKER
i think its ok now.  I created a new user in ad and a new mailbox ran outlook and it set it  up with no issues.   I think what gets me is if I go into the account properties i see the local name of the exchange server instead of mail.mydomain.com under the server name.
Does that matter?
hmcnasty

ASKER
of course i'm speaking about internal users
hmcnasty

ASKER
it is using autodiscover through the test email auto config
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes
hmcnasty

ASKER
Hi Will.  It seems that some folks are still getting the cert error, however I created a new account and i don't get it.
The test email auto config shows the correct OWA link
The only thing that still shows the local server name in under protocol: Exchange PC
Will Szymkowski

If you reload the profile for the users that are having this issue does it work for them?

Something seems to be cached on the machine.

Will.
hmcnasty

ASKER
I'm gonna try that next.  That has to be it.  Everything seems to be in place.

Wes
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
hmcnasty

ASKER
Thanks Will.  This works great.

Wes